io.quarkus/quarkus-hibernate-orm-rest-data-panache vulnerabilities
CVEs whose affected-version data names the io.quarkus/quarkus-hibernate-orm-rest-data-panache package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-87744Critical· 9.1A flaw was found in Quarkus REST Data Panache
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without expli…
▾ MidnightRed Hat · io.quarkus/quarkus-hibernate-orm-rest-data-panacheEPSS 0.39%via NVD
CVE-2026-94451Medium· 6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to lea…
▾ SunlitRed Hat · io.quarkus/quarkus-hibernate-orm-rest-data-panacheEPSS 0.27%via NVD